CVE-2021-22764

mediumpriority · track · 22EPSS 0.019 · 79 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.86% (79th) EPSS

CVSS 5 · medium

Is it mine?

21 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-27

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedPowerLogic PM5560cisa_csaf_ot
Version 2.8.3 of the PowerLogic PM5560, 5563, 5580 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000-power-meters/?parent-subcategoryid=4125&filter=business-2-building-automation-and-control - software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&parent-subcategory-id=4125&filter=business-2-building-automation-and-control#software-and-firmware
FixedPowerLogic PM5561cisa_csaf_ot
Version 10.7.3 of the PowerLogic PM5561 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000-power-meters/?parent-subcategoryid=4125&filter=business-2-building-automation-andcontrol#software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&parent-subcategory-id=4125&filter=business-2-building-automation-and-control#software-and-firmware
FixedPowerLogic PM5562cisa_csaf_ot
Version 4.3.5 of the PowerLogic PM5562 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000/12146169702-basic-multifunction-metering/?selectednode-id=12146169702&N=brand=se%26countrycode=UK%26language-code=en%26node-id=12146169702 - software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&selected-node-id=12146169702&N=brand%253Dse%2526country-code%253DUK%2526language-code%253Den%2526node-id%253D12146169702#software-and-firmware
FixedPowerLogic PM5563cisa_csaf_ot
Version 2.8.3 of the PowerLogic PM5560, 5563, 5580 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000-power-meters/?parent-subcategoryid=4125&filter=business-2-building-automation-and-control - software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&parent-subcategory-id=4125&filter=business-2-building-automation-and-control#software-and-firmware
FixedPowerLogic PM8ECCcisa_csaf_ot
PowerLogic PM8ECC has reached end of service and is no longer supported. Customers should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level once commissioning is complete to reduce the risk of exposure. Additionally, Customers should ensure the General security Recommendations listed below are in place.

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lprimary · NVD / NIST USexploitability 3.9 · impact 1.4

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · CISA US

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondaryexploitability 3.9 · impact 1.4

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USCWE-287US

affected products (21)

Products and version ranges known to be affected.

Schneider Electric PowerLogic PM5560 Versions prior to v2.7.8all versionscisa_csaf_otUS
Schneider Electric PowerLogic PM5560 v2.8.3all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5561 Versions prior to v10.7.3all versionscisa_csaf_otUS
Schneider Electric PowerLogic PM5561 v10.7.3all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5562 Versions prior to v4.3.5all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5562 v2.5.4 and priorall versionscisa_csaf_otUS
Schneider Electric PowerLogic PM5563 Versions prior to v2.7.8all versionscisa_csaf_otUS
Schneider Electric PowerLogic PM5563 v2.8.3all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic 5563all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5560all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5560< 2.7.8cisa_csaf_otUS
Schneider Electric PowerLogic PM5561all versionsfixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5561< 10.7.3cisa_csaf_otUS
Schneider Electric PowerLogic PM5562≤ 2.5.4cisa_csaf_otUS
Schneider Electric PowerLogic PM5562< 4.3.5fixedcisa_csaf_otUS
Schneider Electric PowerLogic PM5563< 2.7.8cisa_csaf_otUS
n/a PowerLogic PM55xx, PowerLogic EGX100, and PowerLogic EGX300 (see security notification for version infromation)≤ PowerLogic PM55xx, PowerLogic EGX100, and PowerLogic EGX300 (see security notification for version infromation)enisa_euvdEU
schneider-electric powerlogic pm5560 firmware< 2.7.8nvdUScpe:2.3:o:schneider-electric:powerlogic_pm5560_firmware:*:*:*:*:*:*:*:*
schneider-electric powerlogic pm5561 firmware< 10.7.3nvdUScpe:2.3:o:schneider-electric:powerlogic_pm5561_firmware:*:*:*:*:*:*:*:*
schneider-electric powerlogic pm5562 firmware≤ 2.5.4nvdUScpe:2.3:o:schneider-electric:powerlogic_pm5562_firmware:*:*:*:*:*:*:*:*

showing 20 of 21

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-24-331-01Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC2021-06-08icsa · cisa_csaf_otUS
Overview Schneider Electric is aware of a vulnerability in its PowerLogic PM55xx and PowerLogic PM8ECC products. The PowerLogic PM55xx products are power metering devices. The PowerLogic PM8ECC product is an ethernet communication module. Failure to apply the mitigations or remediations provided below may risk elevation of privileges, which could result in loss of control of the affected device.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisa_csaf_ot nvd NVD CVE.org MITRE

published 2021-06-11modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan